About This Course
This AICQ-SICEV-recognized course provides the knowledge and skills required to conduct first-, second-, and third-party audits of Information Security Management Systems (ISMS).
The 5-day course combines Module 1 (2 days – ISO19011 and ISO17021 auditing techniques) and Module 2 (3 days – ISO27001:2022 + ISO27002:2022 standards + final exam). These courses can be selected from available dates on the calendar or in e-learning format, where available.
Course Syllabus
(National and European accreditation and certification system; Regulatory references; ISO 19011, ISO/IEC 17021 and ISO/IEC 27006 standards; Principles of auditing; Auditing of security processes and controls; AICQ-SICEV certification scheme for ISMS auditors; AICQ-SICEV code of ethics for auditors).
(Risk management related to the management system and information security and the process approach; Elements of risk assessment (identification, analysis and weighting) and treatment; Applicable security controls proposed in Annex A of ISO/IEC 27001 and ISO/IEC 27002; The organizational security model: the Plan-Do-Check-Act cycle of continuous improvement; Correlation with other standards of the ISO/IEC 27000 family.)
– Legal Area
(Current legislative references (Privacy/GDPR, Workers’ Statute, Legislative Decree 231/2001, …); Contractual aspects relating to suppliers, customers, third parties).
– Technology Area
(Basic elements of ICT and information security; ICT security controls; Incident management; Business continuity, disaster recovery, and crisis management).
– Management Area
(Organizational aspects of information technology; Responsibilities involved in information security).
Course Packages
Remote Instructor Led
Self Paced E-Learning
All You Need to Know
IT Auditors and aspiring auditors and lead auditors ISO/IEC 27001 on information security.
– High school diploma or higher education qualification.
– Experience in Information Protection and Security management is recommended, but not mandatory.
– If you have already obtained a previous A/LA certification on another ISO standard, recognized by AICQ-SICEV or another equivalent training body, you can participate in Module 2 only. Otherwise, you are required to attend both Modules for a total of 5 days.
Study materials are provided in digital format.
Participants are not permitted to miss more than 5% of the scheduled time for the entire course.
Why Choose Profice?
Official Partner
Authorized Training Partner delivering official certified curriculum
Expert Instructors
Certified professionals with 10+ years of real-world experience
Hands-on Labs
Real-world projects and 24/7 lab environment access
95% Pass Rate
Industry-leading certification exam success rate
Lifetime Support
Ongoing mentorship and community access after course completion
Job Assistance
Dedicated placement support with 500+ hiring partners
Profice is an official training partner delivering globally recognized certifications.